Privacy Policy

Kudos Journal ("we," "our," or "the app") is a personal journal app for collecting and reflecting on praise. We designed Kudos Journal with privacy at its core. This policy explains what data we handle, how it is stored, and what rights you have.

1. What Data We Collect

We collect the minimum data necessary for the app to function:

• Apple User Identifier: When you sign in with Apple, we receive an opaque, app-specific user identifier. This is not your Apple ID, email address, or real name. It is used solely to associate your data with your account in CloudKit.
• User-Created Content: The praise entries, books, tags, and any other content you create within the app. This content is authored entirely by you (or submitted to you by others through invite links).

2. How Data Is Stored

All of your personal data is stored in two places, both controlled by Apple's infrastructure:

• On-Device (SwiftData): Your books, entries, and preferences are stored locally on your device using SwiftData. This data never leaves your device except to sync with your own iCloud account.
• iCloud Private Database (CloudKit): Your personal data syncs to iCloud's Private Database, which is part of your personal iCloud account. This data is encrypted and managed by Apple under your Apple Account. We cannot access, read, or decrypt your private database content.

3. CloudKit Public Database Usage

When you share an invite link and someone submits praise for you, the app uses CloudKit's Public Database as a temporary relay:

• Invite Records: When you create an invite link, a lightweight invite record is stored in the CloudKit Public Database so that the praise writer can submit their message.
• Submitted Praise: When someone writes praise for you via an invite link, that praise is temporarily stored in the Public Database until you accept it.
• Automatic Deletion: Once you accept the praise into your personal collection, the corresponding records in the Public Database are deleted. Praise is not retained in the Public Database after acceptance.

4. What We Do NOT Collect

Kudos Journal does not collect, store, transmit, or process any of the following:

• Email address or phone number -- unless you voluntarily opt in to share your email through Sign in with Apple (we do not require or request this)
• Real name or profile photo
• Location data
• Contacts or address book
• Browsing history or search queries
• Device identifiers for advertising
• Analytics, telemetry, or usage metrics
• Health, financial, or biometric data

There are no analytics frameworks, crash reporters, or third-party SDKs embedded in the app.

5. Third-Party Data Sharing

We do not share, sell, rent, or disclose your data to any third parties. There are no advertising networks, analytics providers, or data brokers involved in Kudos Journal. The only external service used is Apple's CloudKit, which operates under Apple's Privacy Policy.

6. Cookies and Website Tracking

The Kudos Journal website (kudosjournal.app) is a static site that serves an Apple App Site Association file for Universal Links. The website does not use cookies, local storage, tracking pixels, or any form of visitor tracking.

7. Children's Privacy

Kudos Journal is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app, please contact us and we will take steps to remove any associated data.

8. Data Retention

• On-Device Data: Stored locally until you delete it within the app or delete the app from your device.
• iCloud Private Database: Retained in your personal iCloud account until you delete it through the app or manage it through Apple's iCloud settings.
• CloudKit Public Database: Invite and praise records are temporary. Praise records are deleted after you accept them into your collection. Invite records are cleaned up when they are no longer active.

9. Your Rights

Because your data lives on your device and in your own iCloud account, you have direct control:

• Delete your data: You can delete individual entries, entire books, or all data within the app at any time.
• Delete your account: Deleting your account removes all locally stored data. Data in your iCloud Private Database is managed through your Apple Account and Apple's iCloud settings.
• Export your data: You can export your praise books as PDF files at any time.
• Manage iCloud data: You can manage or delete iCloud data through your device's Settings > Apple Account > iCloud.

Since we have no custom server and cannot access your iCloud Private Database, data deletion is handled directly by you through the app and through Apple's infrastructure.

10. Security

Your data is protected by Apple's security infrastructure:

• On-device data is protected by your device's passcode, Face ID, or Touch ID.
• iCloud data is encrypted in transit and at rest by Apple.
• Sign in with Apple provides secure, private authentication without exposing your credentials to us.

11. Changes to This Policy

If we make changes to this Privacy Policy, we will update the effective date at the top of this page. Continued use of Kudos Journal after changes are posted constitutes your acceptance of the revised policy. For material changes, we will provide notice through the app.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us: